Cybersecurity risk-management measures are the policies, procedures, and technical controls that organizations must implement to manage risks to their network and information systems.

They include areas such as:

  • Risk management
  • Incident handling
  • Business continuity
  • Supply chain security
  • Access control and encryption